Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
File:                     96BC85E8145711EF8ED9C174C4F9AE02.roa (raw, json)
Hash identifier:          r9L4CmzavsqqBK92JPFfdFnoYkrBESFuwdtJEjg40XU=
Subject key identifier:   4B:D0:10:64:A6:3B:7B:1D:57:4C:90:4D:AA:55:59:45:50:8B:33:F7
Certificate issuer:       /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Certificate serial:       0209
Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
Signing time:             Wed 17 Jul 2024 03:25:19 +0000
ROA not before:           Wed 17 Jul 2024 03:25:19 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     38203
IP address blocks:        103.190.204.0/23 maxlen: 24
                          2400:9220::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
                          rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
        Validity
            Not Before: Jul 17 03:25:19 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6697399f-09c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:85:35:65:5a:f5:f9:f6:c6:d5:f4:46:d6:
                    72:4c:5f:9c:a9:46:cc:d6:1e:63:2d:e8:60:c6:54:
                    a6:f9:83:63:21:da:25:20:13:a0:c0:31:4a:fd:6f:
                    57:2e:d4:e4:ca:bf:06:57:d3:e3:de:2b:bc:56:a0:
                    8a:78:7e:3e:08:33:a1:dd:75:4c:b9:e7:a3:c9:78:
                    81:86:5b:f1:99:3f:da:ad:35:1d:94:dc:04:f3:90:
                    7a:a1:99:38:0b:83:fe:6c:e1:85:e1:d9:03:ca:af:
                    4a:d8:85:03:3d:8c:44:87:dc:12:bb:39:05:0e:b4:
                    de:63:34:3b:1c:6e:a8:c3:7a:2d:68:fa:2d:af:10:
                    49:0e:74:9a:f1:ca:08:68:46:25:a8:8d:72:92:6d:
                    3c:3b:76:58:b2:14:e1:88:b7:08:88:7c:fc:b4:08:
                    f1:28:26:9d:cd:9d:ca:6e:c4:b9:4c:54:0e:40:a4:
                    6f:72:e3:d4:26:46:18:ce:21:eb:48:31:87:c0:cb:
                    a5:7b:f2:fe:aa:79:83:ce:2c:c2:1a:31:04:64:f0:
                    b4:c4:4c:1c:c3:bd:53:b2:e4:23:6f:af:35:c8:04:
                    83:1f:bd:c9:b6:76:33:1f:d2:06:da:7b:08:0f:00:
                    4c:5e:92:55:54:c6:ec:01:fe:17:cb:c5:cf:e7:cc:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:10:64:A6:3B:7B:1D:57:4C:90:4D:AA:55:59:45:50:8B:33:F7
            X509v3 Authority Key Identifier:
                keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.204.0/23
                IPv6:
                  2400:9220::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:48:b6:d7:6a:5e:20:46:e3:fc:70:71:f7:3d:8c:e8:ed:
         85:b6:c8:6c:29:33:5f:ee:92:76:ab:07:aa:8d:c6:64:e3:a6:
         69:c0:13:56:ce:11:91:52:48:a6:60:23:a5:d1:1b:2e:67:fe:
         a1:72:60:22:1e:c0:66:3e:b0:3c:bf:ab:fe:55:c6:8b:21:ed:
         e5:53:d6:0c:99:95:55:46:12:e9:a6:cc:25:3b:96:87:ed:f4:
         6c:78:41:31:8e:71:e1:4b:94:71:06:17:92:ea:98:2c:b4:e8:
         55:f9:3e:f2:9c:1d:5d:ef:a2:66:75:06:3e:63:eb:7e:b6:ba:
         9b:28:96:8e:2b:8a:5f:8f:a7:cb:6c:be:1e:69:5d:2b:28:f6:
         98:c8:7d:1f:21:e6:d4:80:d4:8b:cb:bb:9b:0a:d7:c9:ae:ae:
         50:95:60:47:92:7c:f5:74:58:e1:90:c9:8e:f4:14:5d:c0:da:
         6d:44:6c:6e:25:6a:70:10:00:08:51:32:85:e0:bf:30:48:78:
         56:40:50:08:dd:9d:f3:36:49:cf:a2:e8:1f:60:f2:3d:73:61:
         92:95:26:e8:03:92:8a:9a:ca:40:64:fd:d5:00:86:cb:00:e6:
         8d:22:32:a5:86:17:6d:c8:c6:a2:f5:ee:e1:e9:d5:65:f7:1b:
         13:08:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:52 2024 by rpki-client on console-fra.rpki-client.org